ffdroider | 8e5d1bf413e250f4e2964e715ab71277eb68baff8a9895fc28611f859f039207 | Triage

Sharing

General

Target

8e5d1bf413e250f4e2964e715ab71277eb68baff8a9895fc28611f859f039207
Size

1.2MB
Sample

250413-g3rtcsz1ez
MD5

2d751ef0dd4aeb0f1413738822697da7
SHA1

45101cb9a786c59d94a87f27cec7d402d5854669
SHA256

8e5d1bf413e250f4e2964e715ab71277eb68baff8a9895fc28611f859f039207
SHA512

5eae75df6c7657f873202968164d51297f3318b1f0c1a505c1e7f49e961939ca8026056879911648af7c83f1a854042414b48d549337a348f084fcd96b7c50c8
SSDEEP

24576:H5xIlrhX1p0AmmfLlmTqhtMhzrZyWCFRahDOv6uNQXQHrZ:2p5RatpuaX2rZ

Score

10^/10

ffdroider defense_evasion discovery spyware stealer trojan

Malware Config

Targets

- Target
  
  8e5d1bf413e250f4e2964e715ab71277eb68baff8a9895fc28611f859f039207
- Size
  
  1.2MB
- MD5
  
  2d751ef0dd4aeb0f1413738822697da7
- SHA1
  
  45101cb9a786c59d94a87f27cec7d402d5854669
- SHA256
  
  8e5d1bf413e250f4e2964e715ab71277eb68baff8a9895fc28611f859f039207
- SHA512
  
  5eae75df6c7657f873202968164d51297f3318b1f0c1a505c1e7f49e961939ca8026056879911648af7c83f1a854042414b48d549337a348f084fcd96b7c50c8
- SSDEEP
  
  24576:H5xIlrhX1p0AmmfLlmTqhtMhzrZyWCFRahDOv6uNQXQHrZ:2p5RatpuaX2rZ
Score

10^/10

ffdroider defense_evasion discovery spyware stealer trojan
- FFDroider
  Stealer targeting social media platform users first seen in April 2022.
  stealer ffdroider
- Ffdroider family
  ffdroider
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks whether UAC is enabled
  defense_evasion trojan
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ffdroiderdefense_evasiondiscoveryspywarestealertrojan